Security and Compliance Lead

247Hire; North Dakota; On-site; USD 120,000 - 170,000; Full time

Job summary

247Hire is seeking a Security and Compliance Lead to oversee governance, compliance management, and risk mitigation across the IT environment.

You will ensure adherence to FedRAMP requirements, protect Federal Tax Information (FTI), and drive continuous improvements in security posture, including SOC 2 and ISO 27001 alignment. Collaboration with cross-functional teams and regulators is essential.

Qualifications

• Bachelor's degree in cybersecurity, IT, computer science, engineering, or a related field.
• 7+ years of experience in information security, risk management, or governance.
• Strong knowledge of FedRAMP and regulatory frameworks.
• Experience handling Federal Tax Information (FTI) and regulated environments.
• Experience supporting audits (SOC 2, ISO 27001).

Responsibilities

• Lead security and compliance programs to meet regulatory, contractual, and organizational requirements.
• Manage FedRAMP controls and security requirements.
• Protect and monitor Federal Tax Information (FTI) per regulations.
• Develop and maintain security policies, standards, procedures, and controls.
• Oversee vulnerability management, assessment, remediation, and risk mitigation.
• Coordinate periodic security reviews, risk assessments, and compliance evaluations.
• Support SOC 2, ISO 27001, and similar audits with evidence collection.
• Track audit findings, gaps, and remediation actions.
• Collaborate with infrastructure, application, security, and operations teams to implement controls.
• Monitor regulatory changes and assess impact on obligations.
• Prepare compliance reports and executive updates.

Skills

FedRAMP knowledge

Information Security

Risk Management

Regulatory Compliance

Audit

Vulnerability Management

SOC 2

ISO 27001

Policy Development

Documentation

Education

Bachelor's degree in Cybersecurity or related field

Tools

Vulnerability Scanning Tools

Audit Management Software

SOC 2 Tooling

ISO 27001 Toolkit

Job description

Job Summary:

The Security and Compliance Lead is responsible for overseeing security governance, compliance management, and risk mitigation activities across the IT environment. The role ensures adherence to FedRAMP-related requirements, protection of Federal Tax Information (FTI), vulnerability management processes, and compliance with frameworks such as SOC 2 and ISO standards. The individual works closely with technical, operational, audit, and business teams to maintain a strong security posture, support regulatory requirements, and drive continuous compliance improvements.

Key Responsibilities:

• Lead the organization's security and compliance programs to ensure adherence to regulatory, contractual, and organizational requirements.
• Manage compliance activities related to FedRAMP controls and security requirements.
• Ensure proper handling, protection, and monitoring of Federal Tax Information (FTI) in accordance with applicable regulations and policies.
• Develop, maintain, and monitor security policies, standards, procedures, and compliance controls.
• Oversee vulnerability management processes, including vulnerability assessments, remediation tracking, reporting, and risk mitigation.
• Coordinate periodic security reviews, risk assessments, and compliance evaluations.
• Support SOC 2, ISO 27001, and other compliance audits by collecting, validating, and maintaining required evidence and documentation.
• Track and manage audit findings, compliance gaps, corrective actions, and remediation plans.
• Collaborate with infrastructure, application, security, and operations teams to implement and maintain security controls.
• Monitor regulatory changes and assess their impact on security and compliance obligations.
• Prepare compliance reports, risk dashboards, and executive updates for management and stakeholders.

Required Qualifications:

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field.
• 7+ years of experience in Information Security, Risk Management, Compliance, Audit, or Governance roles.
• Strong knowledge of FedRAMP security requirements and regulatory compliance frameworks.
• Experience handling and protecting Federal Tax Information (FTI) and supporting regulated environments.
• Hands-on experience managing vulnerability assessment, remediation, and risk management programs.
• Experience supporting SOC 2, ISO 27001, and similar regulatory or security compliance audits.
• Knowledge of security governance, risk management, security controls, and compliance monitoring.
• Familiarity with security tools, vulnerability management platforms, and audit management processes.
• Strong analytical, problem-solving, and risk assessment skills.
• Excellent communication, documentation, and stakeholder management abilities.
• Experience working with auditors, regulators, customers, and cross-functional technology teams.